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1 Serre congruence properties and KKP question 

Let d,a G Z with d > 1, Z is the set of rational integers. In a recent paper 
[KKP], Kim, Koo and Park presented a question with elliptic curves over finite fields 
as follows ( in their original form ): 

(Open questions of Kim-Koo-Park) Let E p : y 2 = x 3 + f(k)x + g(k) be 

an elliptic curve over a finite field ¥ p and a be a nonnegative integer. 

( 1 ) (Strong form) Can one find f(k), g{k) satisfying §E P (F P ) = a ( mod d) 
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for a fixed integer d and for almost all primes p ? 

( 2 ) (Weak form) One may consider partial conditions for some primes p, for 
example p = 1 ( mod 4). Can one find f(k), g(k) satisfying §E P (F P ) = a ( mod 
d) for a fixed integer d and for all such primes p ? 

For a set T, the notation JjT denote its cardinal number. Throughout this paper, r 
almost all n means r all but finitely many." 1 

In the following, we call it the KKP-question for the pair (d, a). As indicated in 
their Theorems 1 and 3 of [KKP] about this open question in the case (d, a) = (3, 0), 
the precise meaning of KKP question (strong form) may be explained as follows: 
For fixed integers d and a, can one find polynomials f(t), g(t) G Z[t] in one 
variable t satisfying the following condition: For every integer k G Z such that 
E : y 2 = x 3 + f{k)x + g{k) is an elliptic curve over the rational number field Q, one 
has §E p (F p ) = a ( mod d) for a fixed integer d and for almost all primes pi where 
E p is the reduced curve of E at p. The meaning of weak form is similar. Note that 
in their paper [KKP], both the polynomials / and g are in one variable. One can 
ask similar questions with polynomials /, g over Z in several variables. 

In an earlier version of this paper ( see[Q]), we solved the KKP-question (strong 
form) in the case (d, a) with d \ a, and by relating it to supersingular primes of 
elliptic curves we obtain that the KKP question (strong form) has no solutions in 
the case (d, a) with d, a satisfying gcd (a — l,d) > 1. Moreover, we conjecture 
that the KKP question (strong form) is soluble only in the case (d, a) with d | a 
(see conjecture 6(3) in [Q]). Fortunately, in a letter of J. -P. Serre on June 15, 2009 
to the author, Serre pointed out that this conjecture is true as a corollary of one of 



his results on congruence properties of elliptic curves (see the following Proposition 
1.2). So as a result, a complete solution of the above KKP-question (strong form) 
is obtained, which we state in this paper as follows: 

Theorem 1.1 Let d,a G Z with d > 1. The KKP question (strong form ) is 
soluble in the case (d, a) if and only if d G {2, 3, 4, 5, 6, 7, 8, 9, 10, 12, 16} and d \ a. 

The proof of this result depends heavily on the following Serre's results about 
congruence properties of elliptic curves as stated in his letter ( for a general context, 
see [I]). 

Proposition 1.2 (Serre's Theorem). Let d,a G Z with d > 1. 
(I) For elliptic curve E over Q, the following two conditions are equivalent: 

(1) $E p (W p ) = a ( mod d) for almost all rational primes p. 

(2) 1 + det(g) - Tr(g) = a ( mod d) for all g G G(E,d), where G(E, d) C 
GL( 2, Z/gK) is the subgroup defined by the action of the absolute Galois group 
Gal(Q/Q) on E[d], the set of d— division points of E. 

(II) If there exists an elliptic curve E/Q satisfying the above conditions, then d | a. 

Proof (Serre). (I) The implication (2) =>- (1) is clear: take for g the 
Frobenius of E at p. The implication (1) =>- (2) follows from Chebotarev density 
theorem. 

(II) By applying (2) with g — 1, one finds d \ a. 

As Serre further points out, this works over any number field, and one can also 
replace E by any algebraic variety; and if (1) holds, then a is congruent mod d to 
the Euler-Poincare characteristic of E ( see [I, cor. 7.3] for the EP characteristic). 



For the case (d, a) with d | a, we have the following results: 

Theorem 1.3. Let d > 1 be an integer. If there exists an elliptic curve 
E over Q satisfying §E p (W p ) = ( mod d ) for almost all primes p, then d = 
2,3,4,5,6,7,8,9,10,12,16. Conversely, such elliptic curves E over Q do exist for 
each of the above eleven integers d. 

Proof. For the integer d > 1, assume there exists an elliptic curve E over Q 
satisfying §E P (F P ) = ( mod d ) for almost all primes p. Then by a theorem of Katz 
and Serre ( see [Ka, Theorem 2 ] and [Se, p.IV-6, exercise]), there exists an elliptic 
curve E' over Q which is Q— isogenous to E and satisfying jj_E'(Q) t0 rs = (mod d). 
Then by a famous theorem of Mazur on torsion structure of elliptic curves over Q 
(see [M, Theorem (8) on p.35 ]), we must have d = 2, 3, 4, 5, 6, 7, 8, 9, 10, 12, 16. 
Conversely, also by the theorem of Mazur, each of the above eleven integers d does 
occur as an order of £'(Q) tors for some elliptic curve E over Q. By the Nagell-Lutz 
theorem (see [Hu, p. 115, 116]), -E(Q) t0 rs is isomorphic to a subgroup of E p (F p ) for 
almost all primes p, which implies that §E p (F p ) = (mod d) for almost all primes p 
(in fact, there exists a family of such elliptic curves for each of these integers d, for 
the detail, see the following proof of Theorem 1.1). This proves Theorem 1.3. □ 

Now we come to prove the Theorem 1.1. 

Proof of Theorem 1.1 Suppose the KKP question (strong form ) has solu- 
tions in the pair (d,a). Then one can find polynomials f(t),g(t) G Z[t] in variable 
t and at least one elliptic curve E : y 2 = x 3 + f(k)x + g(k) over Q for some k E Z 
satisfying §E P (F P ) = a ( mod d) for almost all primes p, i.e., E satisfies condition 
(1) of Proposition 1.2 for the pair (d, a). So by the above Serre's Theorem, we have 



d | a. Then by Theorem 1.3, we get d = 2, 3, 4, 5, 6, 7, 8, 9, 10, 12, 16. This proves the 
necessity. 

Conversely, before proving the sufficiency, we first note that, for an elliptic curve 
E/Q and integer pairs (di,a) and (d2,a) with d\ | d 2 , if E satisfies condition (1) in 
the case (d 2 , a), then E also satisfies condition (1) in the case (d± : a), from which one 
can easily see that if the KKP question (strong form) has solutions in case (d 2 ,a), 
then so does it in case (di, a). 

Now we come to prove the sufficiency. Let d be any one of the given eleven in- 
tegers. Without loss of generality, we may as well assume that a = by the 
congruence property. By the above discussion, we only need to consider the five 
cases d = 16,12,10,9,7. By the Nagell-Lutz theorem (see [Hu, p. 115, 116]), and 
by using the known facts about parametrization of families of elliptic curves E/Q 
with torsion subgroup E(Q) tOTS of order d ( see, e.g., [Hu], [Ha], [ST], etc.), one can 
obtain some corresponding solutions of polynomials f(t),g(t) in the KKP question 
(strong form) according to each of the above five d as follows: 
Case d = 16 : f(t) = -27 [(t 2 - l) 4 ((t 2 - l) 4 - 16t 4 ) + 256t 8 ] , 
g (t) = 54 [(t 2 - l) 4 + 16t 4 ] • [((t 2 - l) 4 + 16t 4 ) 2 - 72t 4 (t 2 - l) 4 ] . 
Case d = 12 : f(t) = -27(t 8 + 4t 7 + 4t 6 - 2t 5 - 5t 4 - 2t 3 + 4t 2 + At + 1), 
g(t) = 27(t 4 + 2t 3 + 2t+ l)(2t 8 + 8t 7 + 8t 6 - 10t 5 - 25t 4 - 10t 3 + 8t 2 + 8t + 2). 
Case d = 10 : f(t) = -27 [(1 + t 2 ) 2 (l - 2t - 6t 2 + 2t 3 + t 4 ) 2 - 48t 5 (l + * - t 2 )} , 
g (t) = 54(l+t 2 )(l-2t-6t 2 +2t 3 +t 4 ) [(1 + t 2 ) 2 (l -2t- Qt 2 + 2t 3 + t 4 ) 2 - 72t 5 (l + t - t 2 
Caserf = 9 : /(*) = -27(l-3t 2 +t 3 )(l-9t 2 +27t 3 -45t 4 +54t 5 -48t 6 +27t 7 -9t 8 +t 9 ), 
g (t) = 54(t 18 -18t 17 + 135t 16 -570t 15 + 1557t 14 -2970t 13 +4128t 12 -4230t n + 3240t 10 - 



2032t 9 + 1359t 8 - 1080t 7 + 735t 6 - 306t 5 + 27t 4 + 42t 3 - 18t 2 + 1). 

Case d = 7 : /(*) = -27(t 2 + t + l)(t 6 + lit 5 + 30t 4 + 15t 3 - 10t 2 - 5* + 1), 

g (t) = 54t 12 + 972t n + 6318t 10 + 19116t 9 + 30780t 8 + 26244t 7 + 14742t 6 + 11988t 5 + 

9396t 4 + 2484t 3 - 810t 2 - 324t + 54. 

This proves the sufficiency, and the proof of Theorem 1.1 is completed. □ 

2 Some results and questions on similar type of congruence properties 

Let d, a e Z with d > 1 be as above. In this section, we ask the following 
questions on similar type of congruence properties: 

Question S (resp., O). Which elliptic curves E over Q may satisfy the 
supersingular (resp., ordinary) condition that §E P (W P ) = a ( mod d) for almost all 
supersingular (resp., ordinary) primes p of E ? 

Similarly, one can ask the following question similar to the above KKP-question: 

KKP question of S-type (resp., O-type)). Find polynomials f(t), g(t) e 
7i[t] in one variable t satisfying the following condition: For every integer k E Z 
such that E : y 2 = x 3 + f(k)x + g(k) is an elliptic curve over Q, we have that E 
satisfies the supersingular (resp., ordinary) condition. 

One can ask similar questions on elliptic curves with polynomials /, g over Z in 
several variables or on families of elliptic curves in general Weierstrass model (in 
other words, not necessarily restricted in short Weierstrass form). 

We have the following results about the above Question S and KKP-question 
of S-type: 

Theorem 2.1. Let rf,a£Z with d > 1. Let E be an elliptic curve over Q. 



If E satisfies the supersingular condition, then a — 1 is prime to d. Moreover, if 
if(d) > 2, then E does not have complex multiplication. Here ip(d) is the Euler 
function counting the number of reduced residue classes modulo d. 

Proof. Let a p = p + 1 — §E p (F p ), then by our assumption, there exists a 
positive integer N > 3 such that a p = p + 1 — a ( mod d ) for all supersingular 
primes p > N. Let S be the set consisting of all the supersingular primes of E 
greater than N. By a theorem of Elkies ( see [E]), every elliptic curve over Q has 
infinitely many supersingular primes, so S is an infinite set. For each p G S, by 
definition, we have p \ a p , so by Hasse's theorem ( see [Sil, p. 138 ]), we have a p = 0. 
Therefore p = a — 1 ( mod d ) for all p G S, which implies that a — 1 is prime to d. 
Now we assume furthermore that (p(d) > 2. If E has complex multiplication by 
some quadratic imaginary field K, then it is known that p is a supersingular prime 
for E if and only if p is ramified or inert in K (see [E] or [Si2, p. 184]). So by 
Chebotarev density theorem, there are asymptotically half of all prime numbers 
p being supersingular for E. On the other hand, for the given elliptic curve E, as 
proved above, there exists a positive integer iVo such that for all supersingular primes 
p > Nq of E we have p = a — 1 ( mod d) . This shows by Prime Number Theorem 
that there are at most of all primes p being supersingular, which contradicts 
to the former conclusion because < \. Therefore such elliptic curve E does not 
have complex multiplication. The proof of Theorem 2.1 is completed. □ 

Corollary 2.2 The KKP question of S-type has no solutions in the case (d, a) 
with d, a satisfying gcd (a — 1, d) > 1. 

Proof. Suppose the KKP question (strong form ) has solutions in a given pair 



(d, a) satisfying gcd ( a — 1, d) > 1. Then one can find polynomials f(t),g(t) G Z[£] 
in variable t and at least one elliptic curve E : y 2 = x 3 + f(k)x + g(k) over Q for 
some fceZ, such that E satisfies the supersingular condition. So by Theorem 2.1 
above, we have gcd ( a — 1, d) — 1, a contradiction. This proves Corollary 2.2. □ 

Definition 2.3. For a G Z, we define two sets 

S(a,Q) = {d G Z : d > 1 and there exists an elliptic curve E/Q such that 
§Ep(F p ) = a( mod d) for almost all supersingular primes p of E}, and 

0(a,Q) = {d G Z : d > 1 and there exists an elliptic curve E/Q such that 
§Ep(Wp) = a( mod d) for almost all ordinary primes p of E 1 }. 

Obviously by definition, if d e S(a,Q) (resp., 0(a,Q) ), then d! G 5(a,Q) 
(resp., 0(a,Q) ) for any positive integer d! satisfying 1 < d' \ d. 

As indicted in Theorems 2.1, we present a conjecture about these sets as follows: 

Conjecture 2.4. (1) (Finiteness) For any a G Z, S^a, Q) and 0(a,Q) are 
finite sets. 

(2) (Uniform boundary) There exists a real number c > such that both 
$S(a, Q) < c and ftO(a, Q) < c for all a G Z. 

Let P be the set consisting of all the rational primes, then a question is that 
how many elements are there in S(a, Q) D P and in 0(a, Q) n P? 

As an example, for a = 1, by Theorem 2.1 above, we have JjS^LQ) = 0, 
i.e., 5(1, Q) = 0. For a = 0, by Theorem 1.1 above, we have %S(0, Q) n 0(a, Q) D 
{2, 3, 4, 5, 6, 7, 8, 9, 10, 12, 16}. Is it true that ^(0, Q) = {2, 3, 4, 5, 6, 7, 8, 9, 10, 12, 16}? 

Remark 2.5. By Theorem 2.1, it is easy to see that if the KKP question 



of S-type has solutions in the case (d,a), then one must have gcd (a — l,d) = 1. 
Moreover, one can see that the solutions are intermediately related to the distribu- 
tion of supersingular primes of elliptic curves. At my present knowledge, I do not 
know whether or not there exist elliptic curves E (without complex multiplication, 
of course) and pairs (d,a) other than those given in Theorem 1.3 satisfying that 
p = a — 1 ( mod d) for almost all supersingular primes p of E. As indicated by 
the Lang- Trotter conjecture (see[LT]) and Sato- Tate conjecture (now it is proved for 
elliptic curve E/Q with nonintegral j— invariant by R. Taylor and his collaborators, 
see [T]), there are some deep equidistributed properties for a p (E) = p + 1 — §E p (W p ) 
as p varies. From this, and in a sense of probability distribution, then we can ask 
the following question 

Question 2.6. Is it true that for most elliptic curves E/Q and most positive 
integers d, there are at least two arithmetic progressions modulo d such that each 
of them contains infinitely many supersingular primes p of E ? 

A stronger version of Question 2.6 is the following question, we state it as a 
conjecture. 

Conjecture 2.7. For elliptic curve E/Q and pair (d,a) as above, if almost 
all supersingular primes p of E satisfy p = a — 1 ( mod d), then d \ a, and both d 
and E are given as in Theorem 1.3. 

If Conjecture 2.7 could be proved, then a direct corollary is that the KKP 
question of S-type is soluble only in the case (d, a) with d \ a. 
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